AlmaLinux OS 9 must not have the rsh package installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269351ALMA-09-030710SV-269351r1050234_ruleCCI-000381medium
Description
The "rsh" package provides a client for several obsolete and insecure network services. Removing it decreases the risk of accidental (or intentional) use of those services.
STIGDate
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide2026-02-27

Related Frameworks

3 paths across 3 frameworks
NIST 800-531 mapping
CM-7
1.00
  • DISA · V1R6 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.4.6
1.00
  • DISA · V1R6 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000381
1.00
  • DISA · V1R6 · disa_xccdf · related

Details

Check Text (C-269351r1050234_chk)

Verify that the rsh package is not installed with the following command: $ dnf list --installed rsh Error: No matching Packages to list If the "rsh" package is installed, this is a finding.

Fix Text (F-73283r1048430_fix)

Remove the rsh package with the following command: $ dnf remove rsh